SekitCrosswalk
ENES
Start now
Sekit CSF · Identity & Access Management · Process

RCF-0068Least privilege / RBAC

Access rights are adjusted when roles change and removed when no longer needed

Mapping at a glance
RCF-0068Least privilege / RBACIdentity & Access Management · Process
A.5.18Access rightsISO/IEC 27001:2022PR.AA-03Users and devices authenticatedNIST CSF 2.0PR.AA-05Access permissions managedNIST CSF 2.0CE4.1Manage the account lifecycleCyber EssentialsCE4.2Control administrative privilegesCyber Essentials

RCF-0068 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.18Access rightsequivalentGranting strictly from the role definition, adjusting on role change and stripping unneeded access on review is A.5.18 in full: provision, review, revoke, tied to the access policy.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-03Users and devices authenticatedPR.AA-05Access permissions managed

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.1Manage the account lifecycleCE4.2Control administrative privileges

This topic through the other lenses

RCF-0067 PolicyRCF-0069 Technical

All Identity & Access Management controls

Identity & Access Management
Ask Sekura: “What evidence proves RCF-0068?”
Also via MCP, free with account